Page Comparison

...

1. Configure the following email settings in the <IS_HOME>/repository/conf/output-event-adapters.xml file. 
   The email address configured here is the email account that will be used to send password recovery email notifications to users. 

   Code Block

   <adapterConfig type="email"> <!-- Comment mail.smtp.user and mail.smtp.password properties to support connecting SMTP servers which use trust based authentication rather username/password authentication --> <property key="mail.smtp.from">abcd@gmail.com</property> <property key="mail.smtp.user">abcd</property> <property key="mail.smtp.password">xxxx</property> <property key="mail.smtp.host">smtp.gmail.com</property> <property key="mail.smtp.port">587</property> <property key="mail.smtp.starttls.enable">true</property> <property key="mail.smtp.auth">true</property> <!-- Thread Pool Related Properties --> <property key="minThread">8</property> <property key="maxThread">100</property> <property key="keepAliveTimeInMillis">20000</property> <property key="jobQueueSize">10000</property> </adapterConfig>

   
   

   Tip
   Tip: The email template used to send this email notification is the PasswordReset template. You can edit and customize the email template. For more information on how to do this, see Customizing Automated Emails.

   
   

2. Start the WSO2 Identity Server and log in to the management console.
3. Click on Resident found under the Identity Providers section on the Main tab of the management console.

4. Expand the Account Management Policies tab , and then the Account Recovery tab and select .
   Image Added

5. Select the Enable Notification Based Password Recovery checkbox. 
   For more information on the fields seen on this screen, see Account Recovery REST API.  Image Removed

   Info
   To enable password recovery with reCaptcha verification, select the  Enable reCaptcha for Password Recovery  checkbox.  For more information, see Configuring reCaptcha for Password Recovery.

   
   

6. To enable sending a confirmation email to the user's registered email address after the password reset, select the Notify when Recovery Success checkbox. 

   Tip
   Tip: The email template used to send the confirmation email notification is the passwordResetSuccess template. You can edit and customize the email template. For more information on how to do this, see Customizing Automated Emails.

   
   

7. Update the Recovery callback URL regex with a relevant one.
   

   Tip
   The recommended Recovery callback URL regex to use when testing the product is ^https:\/\/localhost:9443\/.*. However, users should modify it to meet their requirements when they deploy the product.

   
   

...

Recovery using challenge questions

...

...